AWS IAM Identity Center

Connect Identity Center users and groups to Superviso.

The AWS IAM Identity Center connector imports identities and privilege relationships from an AWS Identity Store.

Required values

  • Access Key and Secret Access Key for the dedicated AWS principal
  • Region where IAM Identity Center is configured
  • Identity store ID for the directory Superviso should read

Required access

Grant AWSSSODirectoryReadOnly. Superviso validates the connection by reading a limited set of users and groups from the configured identity store.

Use a dedicated read-only principal and verify the identity store ID before testing the connector.

Before you start

Create the credentials listed above in the provider’s administration tools.

Configure in Superviso

  1. Open Settings → Connectors and choose Add connector.
  2. Select AWS IAM Identity Center from Provider.
  3. Associate the intended asset, or use the new-asset option when appropriate. Enable only the supported synchronization options you need.
  4. Enter Access Key, Secret Access Key, Region, and the correct Identity store ID.
  5. Recheck the required privileges, scope, and filters, then choose Create connector. Resolve any validation errors shown by the form.
  6. Open the saved connector, choose Sync connector when available, and confirm the synchronization scope.
  7. Open Logs, wait for execution to finish, and inspect the result and any errors. Open the relevant Identities, Privileges, or Resources page for the enabled integration to verify collected records.
Unsaved AWS IAM Identity Center connector setup with synchronization options and blank credential fields.
Select AWS IAM Identity Center and review its supported options before entering your own credentials. Select the image to view it full size.

Expected outcome

The connector is saved for AWS IAM Identity Center with the intended integration and collection scope. Synchronization logs show progress, results, and imported records.

If setup or synchronization fails

Check the exact account or organization identifier, required form values, credential validity, granted access, and selected filters. Inspect the failed log’s details before retrying. If only some records are missing, check their scope and provider permissions. For synchronization status and source-managed fields, see Connectors and synchronization logs.

Back to Providers

Screenshot

Scroll to inspect the image, or choose Fit image to see the whole screen.